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DETAILED ACTION 

1 . In view of the Pre-Appea! Request filed on 1 0/23/2008, PROSECUTION IS 
HEREBY REOPENED. A new ground of rejection is set forth below. 

2. This action is responding to application amendments filed 10-23-2008. 

Claims 1 - 6, 8 - 19, 31 - 36, 38, 39, 41 - 43, 45 - 52, 54, 56 - 61 are pending. Claims 7, 
20 - 30, 37, 40, 44, 53, 55 have been cancelled. Claims 1, 31, 34, 49 are independent. 
This application was filed 11-21-2003. 

Response to Arguments 

3. Applicant's arguments filed 1 0-23-2008 have been fully considered but they are 
moot due to new grounds of rejection. 

Previous Responses: 

3.1 The Hardy prior art discloses the generation of a hash consisting of a previously 
generated hash and an encryption key. (see Hardy col. 10, lines 56-64: combines the 
digest H, with signer's private key; concatenate two values; hash generated from a hash 
and a private encryption key) 

The Hall prior art is used to reject the generation and usage of clear form rights 
information in order to achieve the advantage of easy access by simplifying rights 
enforcement, (see specification page 4, lines 26-29: "Storing the information in clear 
form can greatly simplify rights enforcement and/or usage reporting because the 
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information does not need to be decrypted before it can be read or used either on the 
client device or by an external device,") The data structures themselves do not 
constitute digital rights information. The contents of the data structures contain the 
rights information. 

In addition, the Hall prior art discloses the usage of clear form rights information 
plus the protection and security of data integrity using a cryptographic hash, (see Hail 
col. 2, lines 7-14; col. 6, lines 12-16; col. 6, Sines 28-32: digital rights management; col. 
6, lines 1 9-28: dear form storage of digital rights information, integrity hash) And, the 
Thoma prior art is used to disclose and reject the inaccessible device key limitation, 
(see Thoma paragraph [0005], lines 1-3: content distribution: paragraph [0031], lines 
15-21; paragraph [0033], lines 5-9; paragraph [0033], lines 11-12: inaccessible key) 

A hash is a well known cryptographic function. It is unclear what applicant is 
claiming, the generation of a hash (which is well known in the art) or the contents of the 
hash? Applicant indicates the contents of two ("internal", "external") integrity hash 
parameters. The contents of each hash in different. And, the clear form representation 
as an added feature. 

The Serret-Aviia prior art discloses the generation of a second hash using a 
previously generated integrity hash value as input, (see Serret-Avila col.4, lines 43-49; 
col. 5, lines 2-1 1 : integrity hash generation using input hash value) 

The Nonaka prior art discloses an apparatus for encryption functions with 
cryptographic key capabilities and a license (resource, device) key. (see Nonaka 
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paragraph [0019], lines 7-11: data processing apparatus; paragraph [0339], lines 2-6: 
attached host CPU, client, apparatus, license (device) key) Applicant has before 
mentioned a unique key but the term "unique" does not appear anywhere within the 
specification or the original claims. There is no disclosure in the specification or the 
original claims that the device key is unique. 

The Nonaka prior art discloses the capability for the usage of content data to be 
tracked. The usage of content is tracked and logged by the Nonaka prior art. 
(see Nonaka paragraph [0053], lines 23-27: track content usage) 

The Nonaka prior art discloses playback capability. There is no indication of 
placing a limitation or restriction on the playback capabilities of content data. The 
unlimited playback of content data is disclosed, (see Nonaka paragraph [0362], lines 1- 
2; paragraph [0477], lines 1-3: unrestricted (unlimited) playback capabilities) 

The Nonaka and Chase prior art combination discloses the capability for content 
data revocation (disabling) as presented within the claimed limitation, (see Chase col. 3, 
lines 60-63: usage request; col. 4, lines 10-16; col. 33, lines 54-56; col. 33, lines 60-63; 
col. 34, lines 4-9: content compromised, content disabled, access permitted only if 
content is not disabled) The Chase prior art is in an analogous field of endeavor, which 
is the field of content data access management and its protection based on access 
rights. Any additional functions do not remove the fact that the referenced prior art 
discloses the revocation or disabling of content data. 
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The Serret-Aviia prior art is in the same fieid of endeavor as the claimed invention. 
The Serret-Aviia prior art concerns systems and methods for authenticating and 
protecting the integrity of electronic information (content data) using cryptographic 
techniques. The generation of a hash is a cryptographic technique and utilized in the 
claimed invention. Authentication is the application of access rights to electronic 
information or content data to determine the scope of access and utilized in the claimed 
invention. 

In response to arguments against obviousness, the rejection to each independent 
and dependent claim includes a citation from the referenced prior art that discloses the 
basis for the rejection. Each obviousness combination clearly indicates the claim 
limitation the combined reference prior art teaches. Sn addition, a cited passage from 
the referenced prior art clearly indicates the motivation for the obviousness combination. 
Each obviousness combination's disclosure is equivalent to the Applicant's claimed 
limitation(s) for the claimed invention. 

Achieved advantage is a valid motivation for the combination of referenced prior 
art. The combination of each referenced prior art combination states a motivation for 
the combination, which translates to an achieved advantage for the combination. 

In response to applicant's argument that the examiner's conclusion of obviousness 
is based upon improper hindsight reasoning, it must be recognized that any judgment 
on obviousness is in a sense necessarily a reconstruction based upon hindsight 
reasoning. But so long as it takes into account only knowledge which was within the 



Application/Control Number: 10/719,674 Page 6 

Art Unit: 2436 

level of ordinary skill at the time the claimed invention was made, and does not include 
knowledge gleaned only from the applicant's disclosure, such a reconstruction is proper. 
See In re McLaughlin, 443 F.2d 1392, 170 USPQ 209 (CCPA 1971). 

Applicant is reminded that the test for obviousness is not whether the features of a 
secondary reference may be bodily incorporated into the structure of the primary 
reference; nor is it that the claimed invention must be expressly suggested in any one or 
all of the references. Rather, the test is what the combined teachings of the references 
would have suggested to those of ordinary skili in the art. See In re Keller, 642 F.2d 
413, 208 USPQ 871 (CCPA 1981). 

Furthermore, in response to applicant's arguments against the reference 
individually, one cannot show nonobviousness by attacking references individually 
where rejections are based on combinations of references. See In re Keller, 642 F.2d 
413, 208 USPQ 871 (CCPA 1981); In re Merck & Co., 800 F.2d 1091, 231 USPQ 375 
(Fed.Cir. 1986). 

Applicant previously mentioned the number of references used for the grounds of 
rejection. In response to applicant's argument that the examiner has combined an 
excessive number of references, reliance on a large number of references in a rejection 
does not, without more, weigh against the obviousness of the claimed invention. See In 
re Gorman, 933 F.2d 982, 18 USPQ2d 1885 (Fed. Cir. 1991). 



Claim Rejections - 35 USC § 103 
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4. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art 
are such that the subject matter as a whole would have been obvious at the time the invention was made 
to a person having ordinary skill in the art to which said subject matter pertains. Patentability shall not be 
negatived by the manner in which the invention was made. 

5. Claims 1 - 4, 8, 9, 11 - 19, 31, 34 - 36, 38, 39, 41, 42, 45 - 52, 54, 56, 57, 59, 60, 

61 are rejected under 35 U.S.C. 103(a) as being unpatentable over Nonaka et al. (US 
PGPUB No. 20030046238) in view of Hall et al. (US Patent No. 7,062,500) and further 
in view of Hardy et al. (US Patent No. 6,079.018) and Thoma et al. (US PGPUB No. 
20020152393). 

Regarding Claim 1, Nonaka discloses a method comprising: 

a) obtaining clear form rights information at a client device, said clear form rights 

information being associated with content stored at said client site; (see Hall col. 

2, lines 7-14; col. 6, lines 12-16; col. 6, lines 28-32: digital rights management; 

col. 6, lines 19-22: clear form storage of digital rights information) 
e) storing the encrypted hash on the client device, (see Nonaka paragraph [0246], 

lines 1-4: storage circuit for encrypted content key data; paragraph [0019], lines 

1-6; paragraph [0019], lines 7-11: data processing apparatus; paragraph [0339], 

lines 2-6: attached host CPU, client) 

Nonaka discloses wherein obtaining an integrity hash of rights information stored at 
a client device; (see Nonaka paragraph [0019], lines 1-6; paragraph [0019], lines 7- 
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11; paragraph [0027], lines 1-7: generate (i.e. obtain) integrity hash using UCP (i.e. 
rights) information; paragraph [0246], lines 1-4: storage circuit for encrypted content 
key data; paragraph [0019], lines 1-6; paragraph [0019], lines 7-11: data processing 
apparatus; paragraph [0339], lines 2-6: attached host CPU, client; paragraph [0192], 
lines 1-5; paragraph [0239], lines 1-3: data storage) 

Nonaka does not specifically disclose whereby rights information stored in a clear 
form. However, Hall discloses: 

b) obtaining a clear form external integrity hash of first data comprising said clear 
form rights information; c) obtaining an interna! hash of second data comprising 
said dear form rights information; (see Hall col. 2, lines 7-14; col. 6, lines 12-16; 
col. 6, lines 28-32: digital rights management; col. 6, lines 19-22: clear form 
storage of digital rights information) 
It would have been obvious to one of ordinary skill in the art to modify Nonaka 
for storage of digital rights information in clear form as taught by Hall. One of 
ordinary skill in the art would have been motivated to employ the teachings of Hall in 
order to ensure data structure integrity, flexibility, interoperability in the management 
of digital rights information, (see Hall col. 1, lines 34-37: " ... The present invention 
also provides techniques for providing rights management data structure integrity, 
flexibility, interoperability, user and system transparency, and compatibility. ...") 

Nonaka-Hall does not specifically disclose a hash comprising a hash and an 
encryption key. However, Hardy discloses wherein a hash comprising said clear 
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form rights information and an externa! key as an integrity secret, (see Hardy col. 10, 
lines 56-64: combines the digest H (previously generated hash), with signer's private 
key; concatenate two values; hash generated from a previous hash and a private 
encryption key) 

It would have been obvious to one of ordinary skill in the art to modify Nonaka- 
Hali for a hash comprising said clear form rights information and an external key as 
taught by Hardy. One of ordinary skill in the art would have been motivated to 
employ the teachings of Hardy for a technique that can reliably generate a highly 
unguessable pseudo-random KKEY seed value for use in a digital signature 
procedure such as DSA. (see Hardy col. 7, lines 54-57: "... another object of the 
present invention to provide a technique for reliably generating a highly unguessable 
pseudo-random KKEY seed value for use in a digital signature procedure such as 
DSA, ...") 

Nonaka-Hall-Hardy discloses wherein encrypting the integrity hash using a client 
device key to generate an encrypted hash, said client device key being externally 
inaccessible from the client device; (see Nonaka paragraph [0026], lines 21-25: 
encryption utilized UCP (i.e. rights) information; paragraph [0036], lines 1-4: license 
(i.e. device) keys utilized; paragraph [0346], lines 5-8) 

Nonaka-Hall-Hardy does not specifically disclose whereby a device key being 
externally inaccessible from the client device. However, Thoma discloses: 
c) device key being externally inaccessible from the client device; (see Thoma 
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paragraph [0005], lines 1-3: content distribution; paragraph [0031], lines 15-21; 

paragraph [0033], lines 5-9; paragraph [0033], lines 11-12: inaccessible key) 
It would have been obvious to one of ordinary skill in the art to modify Nonaka- 
Hall-Hardy for an inaccessible key as taught by Thoma. One of ordinary skill in the 
art would have been motivated to employ the teachings of Thoma for selection of the 
terminal device to receive, distribute digital content from a wide variety of devices, 
(see Thoma paragraph [0012], lines 7-13: "... The invention also allows free 
selection of the terminal device on which content is consumed. That is, the invention 
enables a wide variety of devices to distribute digital content to. The invention also 
provides a system that allows for transferring content from one terminal device to 
another, while still protecting the rights of the copyright owner....") 

Regarding Claims 2, 35, 50, Nonaka discloses the method, client device, machine 
readable medium of claims 1, 34, 49, wherein obtaining the clear form external integrity 
hash comprises: receiving the clear form external integrity hash from a server device, 
(see Nonaka paragraph [0476], lines 1-4; paragraph [0525], lines 3-6: receive hash, 
UCP (i.e. rights) information; paragraph [0019], lines 1-6; paragraph [0019], lines 7-11: 
data processing apparatus; paragraph [0339], lines 2-6: attached host CPU, server) 

Regarding Claims 3, 36, 51, Nonaka discloses the method, client device, machine 
readable medium of claims 1, 34, 49, wherein obtaining the internal integrity hash 
comprises: generating the internal integrity hash on the client device, (see Nonaka 
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paragraph [0027], lines 1-7: generate hash; paragraph [0019], lines 1-6; paragraph 
[0019], lines 7-1 1 : data processing apparatus; paragraph [0339], lines 2-6: attached 
host CPU, client) 

Regarding Claims 4, 52, Nonaka discloses the method, machine readable medium of 
claims 1, 49 comprising storing said clear form external integrity hash on the client 
device, (see Hall col. 2, lines 7-14; col. 6, lines 12-16; col. 6, lines 28-32: digital rights 
management; col. 6, lines 19-22: clear form storage of digital rights information) 

It would have been obvious to one of ordinary skill in the art to modify Nonaka for 
the storage of digital rights information in clear form as taught by Hall. One of ordinary 
skill in the art would have been motivated to employ the teachings of Hall in order to 
ensure data structure integrity, flexibility, interoperability in the management of digital 
rights information, (see Hall col. 1 , lines 34-37) 

Regarding Claims 8, 56, Nonaka discloses the method, machine readable medium of 
claims 1, 49, further comprising: 

a) receiving, at the client device, a content key for the content; (see Nonaka 
paragraph [0026], lines 21-25: receive encryption key) 

b) encrypting the content key using the client device key to generate an encrypted 
content key; (see Nonaka paragraph [0026], lines 21-25: encryption utilized; 
paragraph [0036], lines 1-4: license (i.e. device) key utilized) and 

c) storing the encrypted content key on the client device, (see Nonaka paragraph 
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[0246], lines 1-4: storage circuit for encrypted content key data; paragraph 
[0019], lines 1-6; paragraph [0019], lines 7-11: data processing apparatus; 
paragraph [0339], lines 2-6: attached host CPU, client) 

Regarding Claims 9, 42, 57, Nonaka discloses the method, client device, machine 
readable medium of claims 1 , 34, 49 further comprising: 

a) generating a validation hash from at least the rights information; (see Nonaka 
paragraph [0019, lines 1-6; paragraph [0019], lines 7-11: data processing 
apparatus (i.e. client device); paragraph [0027], lines 1-7: generate integrity (i.e. 
validation) hash) 

b) decrypting the encrypted internal integrity hash to recover the internal integrity 
hash; (see Nonaka paragraph [0019], lines 1-6; paragraph [0021], lines 3-8: 
decryption of UCP (i.e. rights) information) and 

c) comparing the validation hash to the integrity hash to detect tampering with the 
rights information, (see Nonaka paragraph [0246], lines 4-8: comparison of hash 
values to detect tampering) 

Regarding Claim 11, Nonaka discloses the method of claim 1. (see Nonaka paragraph 
[0246], lines 1-4: storage circuit for UCP (i.e. rights information), and content key data; 
paragraph [0019], lines 1-6; paragraph [0019], lines 7-11: data processing apparatus; 
paragraph [0339], lines 2-6: attached host CPU, client) Nonaka does not specifically 
disclose whereby storing the rights information on the client device in a clear form. 
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However, Hall discloses wherein storing the rights information on the client device in a 
clear form, (see Hall col. 2, lines 7-14; col. 6, lines 12-16; col. 6, lines 28-32: digital 
rights management; col. 6, lines 19-22: clear form storage of digital rights information) 
It would have been obvious to one of ordinary skill in the art to modify Nonaka for 
the storage of digital rights information in clear form as taught by Hall. One of ordinary 
skill in the art would have been motivated to employ the teachings of Hall in order to 
ensure data structure integrity, flexibility, interoperability in the management of digital 
rights information, (see Hall col. 1, lines 34-37) 

Regarding Claims 12, 60, Nonaka discloses the method, machine readable medium of 
claims 10, 59, further comprising: reading the clear form rights information from the 
client device out to a server device, (see Nonaka paragraph [0476], lines 1-4; paragraph 
[0525], lines 3-6: transfer UCP (i.e. rights) information) Nonaka does not specifically 
disclose whereby reading the rights information from the client device in the clear form. 
However, Hall discloses wherein reading the rights information from the client device, 
(see Hall col. 2, lines 7-14; col. 6, lines 12-16; col. 6, lines 28-32: digital rights 
management; col. 6, lines 19-22: clear form storage of digital rights information) 

It would have been obvious to one of ordinary skill in the art to modify Nonaka for 
reading the rights information from the client device in the clear form as taught by Hall. 
One of ordinary skill in the art would have been motivated to employ the teachings of 
Hall in order to ensure data structure integrity, flexibility, interoperability in the 
management of digital rights information, (see Hall col. 1, lines 34-37) 
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Regarding Claims 13, 61, Nonaka discloses the method, machine readable medium of 
claims 1, 49, wherein the clear form rights information comprises usage information, the 
method further comprising: 

a) tracking usage of the content; (see Nonaka paragraph [0053], lines 23-27: track 
content usage) 

b) updating the clear form rights information with changes in usage; (see Nonaka 
paragraph [0476], lines 1-4; paragraph [0525], lines 3-6: transfer (i.e. update) 
UCP (i.e. rights) information) 

for each update of the clear form rights information; 

d) re-encrypting, and re-storing the internal integrity hash on the client device, (see 
Nonaka paragraph [0019, lines 1-6; paragraph [0019], lines 7-11: data 
processing apparatus (i.e. client device); paragraph [0027], lines 1-7: re-generate 
(i.e. generate a second time) integrity hash; paragraph [0246], lines 1-4: storage 
circuit for encrypted UCP (i.e. rights) information) 

Nonaka does not specifically disclose a hash of second data comprising a hash and 
a key. However, Hall discloses: 

c) re-obtaining the internal integrity hash of second data comprising the updated 
clear form rights information; (see Hall col. 2, lines 7-14; col. 6, lines 12-16; col. 
6, lines 28-32: digital rights management; col. 6, lines 19-22: clear form storage 
of digital rights information) 

It would have been obvious to one of ordinary skill in the art to modify Nonaka 
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for the storage of digital rights information in clear form as taught by Hail. One of 
ordinary skill in the art would have been motivated to employ the teachings of Hall in 
order to ensure data structure integrity, flexibility, interoperability in the management 
of digital rights information, (see Hall col. 1, lines 34-37) 

Nonaka-Hall does not specifically disclose a hash comprising a hash and an 
encryption key. However, Hardy discloses wherein the hash of second data 
comprising said clear form external integrity hash, and said externally inaccessible 
client device key. (see Hardy col. 10, lines 56-64: combines the digest H (previously 
generated hash), with signer's private key; concatenate two values; hash generated 
from a hash and a private encryption key) 

It would have been obvious to one of ordinary skill in the art to modify Nonaka- 
Hall for a hash comprising said clear form rights information and an external key as 
an integrity secret as taught by Hardy. One of ordinary skill in the art would have 
been motivated to employ the teachings of Hardy for a technique that can reliably 
generate a highly unguessabie pseudo-random KKEY seed value for use in a digital 
signature procedure such as DSA. (see Hardy col. 7, lines 54-57) 

Regarding Claim 14, Nonaka discloses the method of claim 1 wherein the internal 
integrity hash comprises a Hash Message Authentication Code (HMAC). (see Nonaka 
paragraph [0027], lines 1-7: generate a hash (i.e. integrity hash) value utilizing 
cryptographic (i.e. encryption/decryption key) procedures in a hash authentication 
processing system) 
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Regarding Claims 15, 46, Nonaka discloses the method, client device of claims 1 , 34, 
wherein the client device key comprises a code embedded in hardware of the client 
device having no externally accessible data path, (see Nonaka paragraph [0036], lines 
1-4: license (i.e. device) key utilized; paragraph [0346], lines 5-8: inaccessible secure 
device utilized for hash generation) 

Regarding Claim 16, Nonaka discloses the method of claim 1 wherein the client device 
comprises at least one of an MP3 player, a personal data assistant, and cellular phone, 
(see Nonaka paragraph [0019], lines 1-6; paragraph [0019], lines 7-11: data processing 
apparatus; paragraph [0339], lines 2-6: attached host CPU, client device such as a 
PDA, cellular phone, or MP3 player (i.e. systems containing CPU)) 

Regarding Claim 17, Nonaka discloses the method of claim 1 further comprising at 
least one of: 

a) downloading the clear form rights information from a server device; (see Nonaka 
paragraph [0476], lines 1-4; paragraph [0525], lines 3-6: transfer (i.e. download) 
UCP (i.e. rights) information) and 

b) installing a storage medium having the rights information stored thereon, (see 
Nonaka paragraph [0537], lines 3-6: place (i.e. install) on recording medium 
containing UCP (i.e. rights) information) 
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Regarding Claim 18, Nonaka discloses the method of claim 1 wherein the clear form 
rights information grants unlimited play for the content on the client device, (see Nonaka 
paragraph [0339], lines 2-6: playback module; paragraph [0346], lines 1-5: playback 
content data) 

Regarding Claim 19, Nonaka discloses the method of claim 3 wherein generating the 
internal integrity hash comprises generating the integrity hash in trusted hardware, (see 
Nonaka paragraph [0027], lines 1-7: obtain, generate integrity hash: SAM (i.e. trusted, 
secure hardware), generate hash; paragraph [0346], lines 5-8: inaccessible secure, 
trusted device) 

Regarding Claim 31, Nonaka discloses a method comprising: 

a) generating a validation hash from validation data comprising stored clear form 
rights information associated with content stored on a client device; (see Nonaka 
paragraph [0019, lines 1-6; paragraph [0019], lines 7-11: data processing 
apparatus (i.e. client device); paragraph [0027], lines 1-7: generate integrity 
hash; paragraph [0192], lines 1-5; paragraph [0239], lines 1-3: data may be 
stored in an unencrypted (clear text) form) 

c) comparing the validation hash to the integrity hash to detect tampering with the 
clear form rights information, (see Nonaka paragraph [0246], lines 4-8: 
comparison hash values to detect tampering) 

Nonaka discloses wherein decrypting an encrypted hash to recover an integrity hash 
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using an externally inaccessible device key client device key, said integrity hash 
having been previously generated from data comprising the stored rights information 
and a clear form hash of at least the clear form rights information; (see Nonaka 
paragraph [0019], lines 1-6; paragraph [0021], lines 3-8: decryption UCP (i.e. rights) 
information; paragraph [0346], lines 5-8: inaccessible secure device utilized for hash 
generation; paragraph [0192], lines 1-5; paragraph [0239], lines 1-3: data storage) 

Nonaka does not specifically disclose whereby stored clear form rights information. 
However, Hall discloses: 

b) stored clear form rights information; (see Hall col. 2, lines 7-14; col. 6, lines 12- 
16; col. 6, lines 28-32: digital rights management; col. 6, lines 19-22: clear form 
storage of digital rights information) 
It would have been obvious to one of ordinary skill in the art to modify Nonaka 
for the storage of digital rights information in clear form as taught by Hall. One of 
ordinary skill in the art would have been motivated to employ the teachings of Hall to 
ensure data structure integrity, flexibility, interoperability in the management of digital 
rights information, (see Hall col. 1, lines 34-37) 

Nonaka-Hall does not specifically disclose whereby a client device key that is 
externally inaccessible from the client device. However, Thoma discloses wherein a 
client device key that is externally inaccessible from the client device, (see Thoma 
paragraph [0005], lines 1-3: content distribution; paragraph [0031], lines 15-21; 
paragraph [0033], lines 5-9; paragraph [0033], lines 11-12: inaccessible key) 
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It would have been obvious to one of ordinary skill in the art to modify Nonaka- 
Hall for an inaccessible key as taught by Thoma. One of ordinary skill in the art 
would have been motivated to employ the teachings of Thoma for selection of the 
terminal device to receive, distribute digital content from a wide variety of devices, 
(see Thoma paragraph [0012], lines 7-13) 

Regarding Claim 34, Nonaka discloses a client device comprising: 

d) encryption circuitry to encrypt the integrity hash using the client device key to 
generate an encrypted hash; (see Nonaka paragraph [0026], lines 21-25: 
encryption utilized; paragraph [0036], lines 1-4: license (i.e. device) key utilized) 

e) said memory being further operative to store the encrypted hash, (see Nonaka 
paragraph [0246], lines 1-4: storage circuit for encrypted content key data; 
paragraph [0019], lines 1-6; paragraph [0019], lines 7-11: data processing 
apparatus; paragraph [0339], lines 2-6: attached host CPU, client) 

Nonaka discloses wherein a memory operative to store content and rights 
information associated with the content, said memory being externally accessible; 
(see Nonaka paragraph [0246], lines 1-4: storage circuit for content key data; 
paragraph [0192], lines 1-5; paragraph [0239], lines 1-3: data storage) And, 
Nonaka discloses wherein hash circuitry operative to obtain an external integrity 
hash of first data comprising rights information; (see Nonaka paragraph [0019, lines 
1-6; paragraph [0019], lines 7-11: data processing apparatus (i.e. client device); 
paragraph [0027], lines 1-7: generate (i.e. obtain) integrity hash) 
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Nonaka does not specifically disclose whereby to store clear form rights information 
and a second integrity hash. However, Hall discloses: 

b); c); d) to store clear form rights information; (see Hall col. 2, lines 7-14; col. 6, 
lines 12-16; col. 6, lines 28-32: digital rights management; col. 6, lines 19-22: 
clear form storage of digital rights information) 

It would have been obvious to one of ordinary skill in the art to modify Nonaka 
for the storage of digital rights information in clear form as taught by Hail. One of 
ordinary skill in the art would have been motivated to employ the teachings of Hail to 
ensure data structure integrity, flexibility, interoperability in the management of digital 
rights information, (see Hall col. 1 , lines 34-37) 

Nonaka-Hali does not specifically disclose a hash comprising a hash and an 
encryption key. However, Hardy discloses: 

d) obtain an internal integrity hash of second data comprising information, the 

external integrity hash, and the client device key: (see Hardy col. 10, lines 56-64: 
combines the digest H (previously generated hash), with signer's private key; 
concatenate two values; hash generated from a hash and a private encryption 
key) 

It would have been obvious to one of ordinary skill in the art to modify Nonaka- 
Hali for a hash comprising said rights information and an external key as an integrity 
secret as taught by Hardy. One of ordinary skill in the art would have been 
motivated to employ the teachings of Hardy for a technique that can reliably 



Application/Control Number: 10/719,674 Page 21 

Art Unit: 2436 

generate a highly unguessabie pseudo-random KKEY seed value for use in a digital 
signature procedure such as DSA. (see Hardy col. 7, lines 54-57) 

Nonaka-Hall-Hardy discloses wherein a register to store a client device key. (see 
Nonaka paragraph [0048], lines 1-4: register usage by data processing apparatus) 
Nonaka-Hall does not specifically disclose whereby being externally inaccessible 
from the client device. 
However, Thoma discloses: 

a) said register operative for storing a client device key being externally inaccessible 
from the client device; (see Thoma paragraph [0005], lines 1-3: content 
distribution; paragraph [0031], lines 15-21; paragraph [0033], lines 5-9; 
paragraph [0033], lines 11-12: inaccessible key) 
It would have been obvious to one of ordinary skill in the art to modify Nonaka- 
Hall-Hardy for an inaccessible key as taught by Thoma. One of ordinary skill in the 
art would have been motivated to employ the teachings of Thoma for selection of the 
terminal device to receive, distribute digital content from a wide variety of devices, 
(see Thoma paragraph [0012], lines 7-13) 

Regarding Claim 38, Nonaka discloses the client device of claim 34, said memory 
being further operative to store the integrity hash, (see Nonaka paragraph [0246], lines 
1-4: storage circuit for content data; paragraph [0019], lines 1-6; paragraph [0019], lines 
7-1 1 : data processing apparatus; paragraph [0339], lines 2-6: attached host CPU, 
client) Nonaka does not specifically disclose whereby to store the clear form external 
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integrity hash. However, Hall discloses wherein to store the second integrity hash in a 
clear form, (see Hall col. 2, lines 7-14; col. 6, lines 12-16; col. 6, lines 28-32: digital 
rights management; col. 6, lines 19-22: clear form storage of digital rights information) 
It would have been obvious to one of ordinary skill in the art to modify Nonaka for 
the storage of digital rights information (integrity hash) in clear form as taught by Hall. 
One of ordinary skill in the art would have been motivated to employ the teachings of 
Hall to ensure data structure integrity, flexibility, interoperability in the management of 
digital rights information, (see Hall col. 1 , lines 34-37) 

Regarding Claims 39, 54, Nonaka discloses the method, machine readable medium of 
claims 35, 50, wherein the external key comprises a server device key (see Nonaka 
paragraph [0476], lines 1-4; paragraph [0525], lines 3-6: receive hash, UCP (i.e. rights) 
information; paragraph [0019], lines 1-6; paragraph [0019], lines 7-11: data processing 
apparatus; paragraph [0339], lines 2-6: attached host CPU, server), said server device 
having generated the second integrity hash using a server device key. (see Nonaka 
paragraph [0026], lines 21-25: encryption utilized; paragraph [0036], lines 1-4: license 
(i.e. device) key utilized; paragraph [0019], lines 1-6; paragraph [0019], lines 7-11: data 
processing apparatus; paragraph [0339], lines 2-6: attached host CPU, server) 

Regarding Claim 41, Nonaka discloses the client device of claim 34 wherein 
a) the encryption circuitry further operative is to encrypt a content key for the 
content using the client device key; (see Nonaka paragraph [0026], lines 21-25: 
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encryption utilized; paragraph [0036], lines 1-4: license (i.e. device) key utilized) 
and 

b) the memory is further operative to store the encrypted content key on the client 
device, ((see Nonaka paragraph [0246], lines 1-4: storage circuit (i.e. memory) 
for encrypted content key data; paragraph [0019], lines 1-6; paragraph [0019], 
lines 7-1 1 : data processing apparatus; paragraph [0339], lines 2-6: attached host 
CPU, client)) 

Regarding Ciaim 45, Nonaka discloses the method of claim 1 wherein the rights 
information comprises usage information, the client device further comprising:: 

a) tracking circuitry to track usage of the content and update the clear form rights 
information with changes in usage; (see Nonaka paragraph [0053], lines 23-27: 
track content usage; paragraph [0476], lines 1-4; paragraph [0525], lines 3-6: 
transfer (i.e. update) UCP (i.e. rights) information) 

b) wherein the hash circuitry and the encryption circuitry are further operative to 
regenerate, re-encrypting, and re-storing the internal integrity hash on the client 
device, (see Nonaka paragraph [0019, lines 1-6; paragraph [0019], lines 7-11: 
data processing apparatus (i.e. client device); paragraph [0027], lines 1-7: re- 
generate (i.e. generate a second time) integrity hash; paragraph [0246], lines 1-4: 
storage circuit for encrypted UCP (i.e. rights) information) 

Nonaka does not specifically disclose whereby rights information stored in a clear 
form. However, Hail discloses wherein clear form rights information, (see Hall col. 
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2, lines 7-14; col. 6, lines 12-16; coi. 6, lines 28-32: digital rights management; col. 6, 
lines 19-22: clear form storage of digital rights information) 

It would have been obvious to one of ordinary skill in the art to modify Nanaka 
for the storage of digital rights information in clear form as taught by Hall. One of 
ordinary skill in the art would have been motivated to employ the teachings of Hall to 
ensure data structure integrity, flexibility, interoperability in the management of digital 
rights information, (see Hall col. 1, lines 34-37) 

Regarding Claim 47, Nonaka discloses the client device of claim 34 further comprising 
at least one of: 

a) an input port to download the clear form rights information from a server device; 
(see Nonaka paragraph [0019], lines 7-10: interface (i.e. bus) for UCP (i.e. rights) 
information transfer) and 

b) a storage medium port to receive a storage medium having the clear form rights 
information stored thereon, (see Nonaka paragraph [0246], lines 1-4: storage 
circuit for UCP (i.e. rights) information) 

Regarding Claim 48, Nonaka discloses the client device of claim 47 wherein the 
memory at least partially comprises the storage medium, (see Nonaka paragraph 
[0246], lines 1 -4: storage circuit (i.e. memory) for content data) 

Regarding Claim 49, Nonaka discloses a machine readable medium having stored 
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thereon machine executable instructions, the execution of which to implement a method 
comprising: 

c) obtaining an integrity hash of the rights information; (see Nonaka paragraph 
[0019, lines 1-6; paragraph [0019], lines 7-11: data processing apparatus (i.e. 
client device); paragraph [0027], lines 1-7: generate (i.e. obtain) integrity hash) 

e) encrypting the integrity hash using the client device key to generate an encrypted 
hash; (see Nonaka paragraph [0026], lines 21-25: encryption utilized; paragraph 
[0036], lines 1-4: license (i.e. device) key utilized) and 

f) storing the encrypted hash on the client device, (see Nonaka paragraph [0246], 
lines 1-4: storage circuit for encrypted content key data; paragraph [0019], lines 
1-6; paragraph [0019], lines 7-11: data processing apparatus; paragraph [0339], 
lines 2-6: attached host CPU, client) 

Nonaka disclose wherein receiving rights information at a client device, said rights 
information being associated with content stored on the client device, said client 
device having a client device key and storing the rights information on the client 
device, (see Nonaka paragraph [0476], lines 1-4; paragraph [0525], lines 3-6: 
transfer UCP (i.e. rights) information; paragraph [0346], lines 5-8: inaccessible 
secure device utilized for hash generation; paragraph [0192], lines 1-5; paragraph 
[0239], lines 1-3: data storage) 



Nonaka does not specifically disclose whereby receiving clear form rights 
information, and storing the rights information in a clear form. 
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However, Hall discloses: 

a) receiving clear form rights information, (see Hall col. 2, lines 7-14; col. 6, lines 
12-16; col. 6, lines 28-32: digital rights management; col. 6, lines 19-22: clear 
form storage of digital rights information) 

b) storing the rights information in a clear form; (see Hall col. 2, lines 7-14; col. 6, 
lines 12-16; col. 6, lines 28-32: digital rights management; col. 6, lines 19-22: 
clear form storage of digital rights information) 

d) obtaining an internal integrity hash of second data comprising said clear form 
rights information, (see Hall col. 2, lines 7-14; col. 6, lines 12-16; col. 6, lines 28- 
32: digital rights management; col. 6, lines 19-22: clear form storage of digital 
rights information) 

It would have been obvious to one of ordinary skill in the art to modify Nonaka 
for the receipt and storage of digital rights information in clear form as taught by Hall. 
One of ordinary skill in the art would have been motivated to employ the teachings of 
Hall to ensure data structure integrity, flexibility, interoperability in the management 
of digital rights information, (see Hall col. 1, lines 34-37) 

Nonaka-Haii does not specifically disclose a hash comprising a hash and an 
encryption key. However, Hardy discloses wherein a second hash comprising a 
integrity hash and a client device key. (see Hardy col. 10, lines 56-64: combines the 
digest H (previously generated hash), with signer's private key; concatenate two 
values; hash generated from a hash and a private encryption key) 

It would have been obvious to one of ordinary skill in the art to modify Nonaka- 
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Hall for a hash comprising said clear form rights information and an external key as 
an integrity secret as taught by Hardy. One of ordinary skill in the art would have 
been motivated to employ the teachings of Hardy for a technique that can reliably 
generate a highly unguessabie pseudo-random KKEY seed value for use in a digital 
signature procedure such as DSA. (see Hardy col. 7, lines 54-57) 

Nonaka-Hall-Hardy does not specifically disclose whereby a client device key that is 
externally inaccessible from the client device. However, Thoma discloses wherein a 
client device key that is externally inaccessible from the client device, (see Thoma 
paragraph [0005], lines 1-3: content distribution; paragraph [0031], lines 15-21; 
paragraph [0033], lines 5-9; paragraph [0033], lines 11-12: inaccessible key) 

It would have been obvious to one of ordinary skill in the art to modify Nonaka- 
Hall-Hardy for an inaccessible key as taught by Thoma. One of ordinary skill in the 
art would have been motivated to employ the teachings of Thoma for selection of the 
terminal device to receive, distribute digital content from a wide variety of devices, 
(see Thoma paragraph [0012], lines 7-13) 

Regarding Claim 59, Nonaka discloses the method of claim 49 wherein the rights 
information grants unlimited play for the content on the client device, (see Nonaka 
paragraph [0246], lines 1-4: storage circuit for UCP (i.e. rights information), and content 
key data; paragraph [0019], lines 1-6; paragraph [0019], lines 7-11: data processing 
apparatus; paragraph [0339], lines 2-6: attached host CPU, client; paragraph [0362], 
lines 1-2; paragraph [0477], lines 1-3: unrestricted (unlimited) playback) 
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6. Claims 5, 6 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Nonaka-Hall-Hardy-Thoma and further in view of Serret-Avila et al. (US Patent No. 
6,959,384). 

Regarding Claim 5, Nonaka discloses the method of claim 1 further comprising 

receiving the external key at the client device 

storing the integrity hash on the client device, (see Nonaka paragraph [0246], lines 
1-4: storage circuit for content key data (i.e. first or second integrity hash); paragraph 
[0019], lines 1-6; paragraph [0019], lines 7-11: data processing apparatus; 
paragraph [0339], lines 2-6: attached host CPU, client) 

Nonaka does not specifically disclose whereby storing the integrity hash in a clear 
form. However, Hall discloses: 

b) storing the integrity hash in a clear form, (see Hall col. 2, lines 7-14; col. 6, lines 
12-16; col. 6, lines 28-32: digital rights management; col. 6, lines 19-22: clear 
form storage of digital rights information) 
It would have been obvious to one of ordinary skill in the art to modify Nonaka 
for the storage of digital rights information in clear form as taught by Hall. One of 
ordinary skill in the art would have been motivated to employ the teachings of Hall to 
ensure data structure integrity, flexibility, interoperability in the management of digital 
rights information, (see Hall col. 1 , lines 34-37) 
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Nonaka-Hall does specifically disclose the capability to generate a second integrity 
hash using a first integrity hash. However, Serret-Avila discloses: 
a) obtaining a second integrity hash of the rights information; (see Serret-Avila col.4, 
lines 43-49; col. 5, lines 2-1 1 : integrity hash generation using input hash value) 
It would have been obvious to one of ordinary skill in the art to modify Nonaka- 
Hall to generate a second integrity hash as taught by Serret-Avila. One of ordinary 
skill in the art would have been motivated to employ the teachings of Serret-Avila for 
a relatively fast, secure, and efficient authentication of data streams, (see Serret- 
Avila col. 2, line 66 - col. 3, line 3: " ... a need for systems and methods that 
overcome some or all of these limitations by providing relatively fast, secure, and 
efficient authentication of data streams and other electronic content. ... ") 



Regarding Claim 6, Nonaka discloses the method of claim 5 wherein obtaining the 
second integrity hash comprises: receiving the second integrity hash from a server 
device (see Nonaka paragraph [0476], lines 1-4; paragraph [0525], lines 3-6: receive 
hash, UCP (i.e. rights) information; paragraph [0019], lines 1-6; paragraph [0019], lines 
7-1 1 : data processing apparatus; paragraph [0339], lines 2-6: attached host CPU, 
server), said server device having generated the second integrity hash using a server 
device key. (see Nonaka paragraph [0026], lines 21-25: encryption utilized; paragraph 
[0036], lines 1-4: license (i.e. device) key utilized; paragraph [0019], lines 1-6; 
paragraph [0019], lines 7-11: data processing apparatus; paragraph [0339], lines 2-6: 
attached host CPU, server) 
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7. Claims 10, 32, 33, 43, 58 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Nonaka-Hall-Hardy-Thoma and further in view of Chase, Jr et al. 
(US Patent No. 7,080,043). 

Regarding Claims 10, 32, 43, 58, Nonaka discloses the method of claim 9. (see 
Nonaka paragraph [0246], lines 4-8: comparison of hash values to detect tampering) 
Nonaka does not specifically disclose disabling the content on the client device if 
tampering is detected. However, Chase discloses wherein disabling the content on the 
client device if tampering is detected, (see Chase col. 3, lines 60-63: usage request; col. 
4, lines 10-16; col. 33, lines 54-56; col. 33, lines 60-63; col. 34, lines 4-9: content 
compromised such as tampering, access to content disabled) 

It would have been obvious to one of ordinary skill in the art to modify Nonaka to 
disable access to content as taught by Chase. One of ordinary skill in the art would 
have been motivated to employ the teachings of Chase to efficiently manage the rights 
attached to digital data such as the capability to revoke content if compromised, and 
add or remove a particular right, (see Chase col. 2, lines 47-51 : "... a need exists for a 
method and mechanism that allows a content owner to revoke all rights of a user to 
render a piece of content, such as for example if the content owner learns that security 
with respect to such content has been breached. More generally, a need exists for a 
method and mechanism that allows a content owner to modify a license of the user to 
update rights of the user to render a piece of content, such as for example to extend an 
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expiration date, adjust a play count, add or remove a particular right, etc. ... ") 



Regarding Claim 33, Nonaka discloses the method of claim 31 further comprising: 
wherein to initiate generation of the validation hash and comparison to the integrity 
hash, (see Nonaka paragraph [0027], lines 1-7: generation of validation hash; 
paragraph [0246], lines 4-8: comparison hash values to detect tampering). 

Nonaka does not specifically disclose the capability to disable content. 

However, Chase discloses: 

a) receiving a usage request for the content stored at the client device, said usage 
request; (see Chase col. 3, lines 60-63: usage request; col. 4, lines 10-16; col. 
33, lines 54-56; col. 33, lines 60-63; col. 34, lines 4-9: content compromised, 
access to content disabled) and 

b) permitting usage only if the content is not disabled, (see Chase col. 4, lines 10- 
16; col. 33, lines 54-56; col. 33, lines 60-63; col. 34, lines 4-9: content 
compromised, access to content disabled) 

It would have been obvious to one of ordinary skill in the art to modify Nonaka 
to disable content as taught by Chase. One of ordinary skill in the art would have 
been motivated to employ the teachings of Chase to efficiently manage the rights 
attached to digital data such as the capability to revoke content if compromised, and 
add or remove a particular right, (see Chase col. 2, lines 47-51 ) 



Conclusion 
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